Privacy Policy

This Privacy Policy ("Policy") issued by 499bet ("Company", "we", "us", "our") in respect of the personal data of individuals ("User", "you", "your") who access or use the 499bet website at499bet.casa and all associated services, applications, features, and content (collectively, the "Platform").

499bet is an online casino and sports betting platform serving Malaysian players. We process personal data in connection with the provision of our Services — including account registration, identity verification, transaction processing, customer support, responsible gambling management, and marketing communications. All financial transactions on the Platform are denominated in Malaysian Ringgit (MYR).

We are committed to processing your personal data lawfully, fairly, and transparently, and to maintaining robust technical and organisational measures to protect your information against unauthorised access, loss, or misuse. By using the 499bet Platform, you acknowledge that you have read and understood this Policy and consent to the processing activities described herein.

For the purposes of this Policy, the following terms shall carry the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, directly or indirectly, including name, identification number, contact details, financial information, and device identifiers.
• "Data Controller" means 499bet, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party engaged by 499bet to process Personal Data on its behalf in accordance with 499bet's instructions.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, organisation, structuring, storage, retrieval, use, disclosure, transmission, or deletion.
• "Consent" means any freely given, specific, informed, and unambiguous indication by which you signal your agreement to the processing of your Personal Data for a specified purpose.
• "KYC" means Know Your Customer — identity and source-of-funds verification procedures conducted in accordance with applicable compliance obligations.
• "Cookies" means small data files placed on your device by the499bet Platform for the purposes of session management, analytics, personalisation, and functionality.

499bet collects the following categories of Personal Data in connection with the operation of the Platform and provision of Services:

499bet collects Personal Data through the following means:

Direct Collection

• When you complete account registration on the 499bet Platform;
• When you submit identity documents for KYC verification;
• When you make deposits or withdrawal requests through supported Malaysian payment channels (DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay);
• When you contact our customer support team via live chat, WhatsApp, or email;
• When you respond to surveys, promotions, or marketing communications;
• When you complete responsible gambling self-assessment tools or set account limits.

Automated Collection

• Through cookies, web beacons, and similar tracking technologies during your use of the Platform (see Section 8);
• Through server logs recording IP addresses, access times, and navigation activity;
• Through device fingerprinting and fraud-detection tools used to protect account integrity.

Third-Party Sources

• From identity verification and KYC service providers engaged to process document authentication;
• From payment processors handling MYR transaction data;
• From fraud prevention and anti-money laundering screening services;
• From analytics providers used to aggregate Platform usage statistics.

499bet processes Personal Data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to perform our contractual obligations to you, including account administration, transaction processing, and Service provision.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including KYC/AML obligations, age verification, and regulatory reporting duties.
• Legitimate Interests: Processing undertaken in pursuance of 499bet's legitimate business interests, including platform security, fraud prevention, responsible gambling monitoring, and Service improvement — provided such interests are not overridden by your privacy rights.
• Consent: Processing of Personal Data for marketing communications and optional analytics personalisation, where you have provided clear and freely given prior consent. You may withdraw your consent at any time through your Account Settings or by contacting our support team.

499bet uses your Personal Data for the following purposes:

• Account Management: Creating, maintaining, and administering your 499bet Account, including processing deposits, withdrawals, and balance management in MYR.
• Identity & Age Verification: Conducting KYC checks to verify your identity, confirm that you are at least 21 years of age, and satisfy applicable compliance obligations.
• Transaction Processing: Facilitating deposits and withdrawals through your chosen Malaysian payment method and maintaining accurate transaction records.
• Fraud & Security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gambling: Monitoring account activity to identify indicators of problem gambling, administering self-exclusion and deposit limit tools, and providing access to responsible gambling resources.
• Customer Support: Responding to your queries, resolving complaints, and maintaining support interaction records for quality assurance purposes.
• Platform Improvement: Analysing aggregated usage data to improve Platform features, performance, and the overall player experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and product updates where you have provided consent. You may opt out at any time.
• Legal Compliance: Meeting our obligations under applicable data protection, anti-money laundering, and gaming regulatory frameworks.

499bet does not sell your Personal Data to third parties. We may share your data with carefully selected third parties only in the following circumstances:

• Service Providers (Data Processors): Third-party vendors engaged to provide services on our behalf, including payment processing (Maybank, CIMB, DuitNow, FPX, Touch 'n Go eWallet, GrabPay), identity verification, cloud hosting, and IT security. These providers are contractually bound to process your data only on499bet's instructions and in accordance with this Policy.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory instruction, 499bet may disclose Personal Data to competent authorities. We will notify you of any such disclosure where legally permissible.
• Fraud Prevention Networks: Personal Data may be shared with industry fraud-prevention and AML screening networks to protect against financial crime and protect the integrity of the Platform.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 499bet's business, Personal Data held at that time may be transferred to the acquiring entity, subject to equivalent privacy protections.

499bet uses cookies and similar technologies to operate and improve the Platform. The types of cookies we use are as follows:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impact your ability to access and use core Platform features. Details on how to manage cookies in common browsers are available through each browser's help documentation.

499bet retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active Account, plus a minimum of 5 years following account closure, to satisfy anti-money laundering, KYC, and regulatory recordkeeping requirements.
• Transaction Records: Retained for a minimum of 7 years following the date of each transaction, in accordance with applicable financial recordkeeping obligations.
• Customer Support Records: Retained for up to 3 years following the resolution of the relevant support interaction.
• Marketing Consent Records: Retained for the duration of your consent status and for up to 3 years following withdrawal of consent, as evidence of prior consent management.
• Technical and Usage Data: Retained in aggregated or anonymised form for platform analytics purposes; identifiable data retained for up to 12 months.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in manner that renders individual identification impossible.

499bet implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 499bet Platform is encrypted in transit using industry-standard TLS protocols.
• Encryption at Rest: Sensitive Personal Data and financial records stored on 499bet's systems are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data is strictly limited to authorised 499bet personnel and service providers on a need-to-know basis, governed by role-based access control policies.
• Two-Factor Authentication: 2FA is available for player accounts and is mandated for internal administrative access to systems holding Personal Data.
• Regular Security Audits: 499bet conducts regular penetration testing and security assessments of its Platform infrastructure.
• Incident Response: We maintain a documented data breach incident response procedure. In the event of a breach affecting your Personal Data, we will notify you in accordance with applicable legal requirements.

Certain Personal Data processed by 499bet may be transferred to, stored in, or accessed from jurisdictions outside Malaysia in connection with the use of cloud hosting infrastructure, third-party service providers, or operational support functions. Where such transfers occur, 499bet ensures that equivalent levels of data protection are applied through appropriate contractual safeguards, including standard contractual clauses or equivalent transfer mechanisms recognised under applicable data protection law.

499bet will not transfer Personal Data to jurisdictions that do not provide an adequate level of data protection without implementing the safeguards described above. If you have questions about the specific jurisdictions to which your data may be transferred, please contact us using the details in Section 16.

Subject to applicable law, you have the following rights in respect of your Personal Data held by 499bet. To exercise any of these rights, please contact our Data Protection team using the details provided in Section 16.

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure: You may request deletion of your Personal Data in certain circumstances, subject to our legal obligations to retain data for compliance purposes.
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances while a dispute or complaint is resolved.
• Right to Data Portability: You may request a copy of your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object: You may object to the processing of your Personal Data for direct marketing purposes at any time, with immediate effect.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

499bet will respond to all verified data subject requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, with notification provided to you of the extension and reasons for it.

The 499bet Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC processes.

If 499bet becomes aware that Personal Data has been collected from an individual under 21, we will take immediate steps to delete that data and close the associated Account. If you believe that 499bet may have inadvertently collected data from an underage individual, please notify us immediately using the contact details in Section 16.

The 499bet Platform may contain references to or integrations with third-party services, including payment processors (such as DuitNow, FPX, Touch 'n Go eWallet, Maybank, and CIMB), game content providers, and analytics platforms. 499bet is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

Third-party payment processors handling your MYR transactions operate under their own privacy frameworks and are independently regulated. 499bet selects payment partners who meet appropriate data security and compliance standards, including PCI-DS certification where applicable.

499bet reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, operational practices, or Platform features. We will notify you of material changes via email or a prominent Platform notification prior to the amended Policy taking effect, where reasonably practicable.

The "Last Updated" date displayed at the top of this Policy will be revised to reflect the effective date of each amendment. We recommend that you review this Policy periodically to remain informed of how499bet handles your Personal Data. Your continued use of the Platform following notification of changes constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by 499bet, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the 499bet Platform in English, Bahasa Melayu, and Chinese.
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Subject Request" as appropriate.

Our team will acknowledge your query within one business day and endeavour to provide a substantive response within 30 days, consistent with the timelines outlined in Section 12.